...
module.exports = function(passport){
   passport.use(new LocalStrategy(
      {
         usernameField: 'email',
         passwordField: 'password'
      }, (email,password,done) => {
         User.findOne({email: email})
            .then(user => {
               if (!user) {
                  return done(null, false, { message: 'Incorrect username.' });
               }else if(user.password === undefined){
                  return done(null, false, { message: 'Vui long reset passwords' });
               }else {
                  bcrypt.compare(password, user.password, (err,result) => {
                     if(err) throw err;
                     if(result){
                        return done(null, user);
                     }else{
                        return done(null, false, { message: 'Password sai !' });
                     }
                  })
               }

            })
      }
   ));
...