User authentication with mongoose (http://mongoosejs.com) and passport (http://passportjs.org/)