simple local authentication strategy using travelogue and hapijs