removed old login code; add api to passport