added in rough auth system based on in memory user directory using passport-local.  Will eventually swap out for an ldap solution that invloves windows auth when node is being hosted in IIS