dashboard authorization using passportjs