authorization refactor, passport.js instead everyauth, ensureAuth
files added