Hurray, passport does look up the user