working on session and passport