added passport local authentication and sessions management. required adding connect-ensure-login middleware.