add passport, create auth controller