adding passport, adding some auth