cookie-session / bodyParser / authRoute / passport
Local strategy handles login/register in one go. No need for 2 routes as we only require username and password.
Register is also handled by login
No need for a different start up file in this project. At least at the moment.
No need at the moment for multiple key files.