First part of web application: static routes, passport authentication