passport config and user auth with mod routes