mocking up passport js is not trivial