fixed passport version in package.json