add sessions, body-parser, etc & add authentication with passport