Remove commented out basic auth middleware
fixup! Add passport-local strategy for legacy auth
Use passport to authenticate the login request

This removes the custom auth handling code from the route handlers and
leaves it up to passport to do the actual auth.