the auth endpoints were created, but I am refactoring to use passport.