user sign up, login, logout with passportjs