using req.user instead of req.session.passport.user, implement view porter for login.html, open youtube video in new window/youtube app