Two main changes are happening here?

1) It is time to deal database access as an asynchronous operation, so all mocked database access now has reliable callbacks.

2) I decided to use "passport" library to control authorization... I still don't if it will perfectly fit, but I'll try.