add login flow to passport.js