Bearer strategy with passport

TODO: seed DB with bootstrap.js contents