move code 'setUser' because passport