use passport for authentication
Merge pull request #21 from dchester/passport-auth

use passport for authentication