adding passport for session handling