auth middleware added. passport seems to be working fine.