sign-up code moved from config/passport.js to /app/controllers/auth.js