move routes to rest.js file
use passport
remove unecessary json keys