req.isAuthenticated() always return false
req.isAuthenticated() always return false