passport.js now working