use passport in server.js