moving to node.js backend
adding passport authentication