var passport = require('passport')
  , LocalStrategy = require('passport-local').Strategy;

passport.use(new LocalStrategy(
  function(username, password, done) {
    if (password == undefined) {
        // create a user
        User.findOne({ username: username }, function (err, user) {
            if (err) { return done(err); }
            return done(null, user);
        });
    } else {
        User.findOne({ username: username }, function (err, user) {
            if (err) { return done(err); }
            if (!user) {
                return done(null, false, { message: 'Incorrect username' });
            }

            bcrypt.compare(password, hash, function(err, res) {
                if (res)
                    return done(null, user);

                return done(null, false, { message: 'Incorrent password' });
            });
        });
    }
  }
));