refactored passport out of server.js