Moved the passport middleware below the session middleware