added passport auth strategy but not working yet