added passport and route authentication, not complete, needs session