moved passport from devDependencies to dependencies