serializing and deserializing users using passport apis