implemented proper auth with passport