add passport and express session
more work on passport