Use session to store username. Fix failure redirect in passport authenticate.