auth: fix Passport.js integration