- remove dependency on mongoose, passport, fibrous
- accept passport as param