passport serialisation issue hack until we get our top-level stuff hooked up to a db

switch the order in app.js so mods get registered first before somi. suddenly the real
serialization methods are called first and we don't get spurious serialization from the top
level. i don't know what any of this means.