moved google dictionary api calls to the server
switched back to passportjs-local :(

wasn't able to do auth with passportjs-http digest since browser was
showing the built-in login pane automatically after getting 401
updating dependencies