remove passport-local from app.js.  no longer needed.