add session and passport