// routes/auth.js

router.post('/',
  passport.authenticate('local'),
  authController.postLogin
);

// providers/auth.js

passport.use(new LocalStrategy(
  function(username, password, done)
    if (password == false) {
        const newUser = new User();
        newUser.name= username;
        newUser.icon = "some random";
        // other random attributes
        newUser.save();
    }

    User.findOne({ username: username }, function (err, user) {
        if (err) { return done(err); }

         // if password is set, check if the credentials match
        if (!user) {
            return done(null, false, { message: 'Incorrect username' });
        }

        if (!User.hashCompare(password, user.password))
            return done(null, false, { message: 'Incorrent password' });


        return done(null, user);
    });
  }
));

// controllers/auth.js

exports.postLogin = (req, res, next) => {
    // user is logged in
};