added user model/routes; auth now using bcrypt
added validPassword instance method to user model
major refactor w/ passport .. lets just say it works