add passport, minor fixes to server.js