adds passport file and some front end routing; untested, but no server-side errors