// routes/auth.js

router.post('/',
  passport.authenticate('local'),
  authController.postLogin
);

// providers/auth.js

passport.use(new LocalStrategy(
  function(username, password, done)
	if (password == false) {
		const newUser = new User();
		newUser.name= username;
		newUser.icon = "some random";
		// other random attributes
		newUser.save();
	}

	User.findOne({ username: username }, function (err, user) {
		if (err) { return done(err); }

		 // if password is set, check if the credentials match
		if (!user) {
			return done(null, false, { message: 'Incorrect username' });
		}

		if (!User.hashCompare(password, user.password))
			return done(null, false, { message: 'Incorrent password' });


		return done(null, user);
	});
  }
));

// controllers/auth.js

exports.postLogin = (req, res, next) => {
	// user is logged in
};