remove unused passportHttp and fixs

remove unused passportHttp and rewrite responses to serve 404 if items
not found