[wip] authentication with passport and sequelize