adding passport authorization to main app, routes