half-cleaned up passport auth