added simple passport auth