added passport user authentication()