added passport support and server side sessions