add passport local strategy and the post call to login