implemented naive (no pw) passport authentication