Seems odd to me to be importing this stuff after `app.listen`. By putting it later, we're risking passport and the db not being initialized when the application is running.