I added passport.js into the project with local strategy, will need to go through and cleanup as well as change token lookup from _id to expiring tokens