Local authentication with passport and mongodb