update
edit auth
remove dep on passport