using passport for auth
passport local auth