Correction

Better to split "passportInit" and "sessionInit". If you prefer to have sessions and auth handled in the same place, what makes sense, then your file should have a name that matches both subjects, the current one is confusing.