session store and user authentication using passport local strategy