make sure `ctx.passport` isn't undefined before using `in` operator
Merge pull request #23 from JiangJie/master

make sure `ctx.passport` isn't undefined before using `in` operator