playing with passport local auth and mocha/chai testing