Add passport for authentication
Use a bearer strategy to get the user based on the value in Authorization header
Use  a local strategy to sign in with username and password