passport.js: move verify function code into a new function user_create_and_lookup()