restful api with express, passport and booskshelf