require passport in mount-auth only
make passport-* optional