- moved the authentication with passport to a separate authenticator module
- implemented the authentication against an actual user in the database
- check if the user is still active when a successful authentication is done