very basic login with passport and connect-session