working on passport auth