now using Passport for auth
Merge remote-tracking branch 'upstream/master'
Starting to work on creating the user's API endpoints.