added authentication and authorization with passport