no passport, but refactored the auth system to use bcrypt and uuid