added passwords to passport local strategy