basic admin authentication using passport and local strategy