first try on implementing passport.js