Rearranged auth setup into separate file.

Factored the authentication bits out into a separate file and router,
so that I can easily keep the passport details separated from the
core app setup.

Also removed extraneous debug log messages.