Define User.signIn(username, password) on the User model
User.signIn uses bcrypt to check the hashed password and return the user or unauthorized
passport-local strategy verify function calls User.signIn()
Defined anonymous user record in User model