Add OAuth 2.
Move mongoose models to models.js.