implementing secure passwords
logout functionality
persist between page refreshes
fix security issue by not returning entire user object
refactor passport code out of server.js
implement clientside authorization
serverside authorization
protect admin pages on the client
Merge pull request #1 from BrettStatman/securityAndAuthorization

Security and authorization