passportJS log in, out and verify