fix package.json
ignore npm debug
add passport and login route