cleanup and user log in handling with passport