modefy app.js by passport session