authRoutes.post('/login', function(req, res) {
    let currentUser = {};

    async.waterfall([

      function checkParams(cb) {
        if (!req.body.username || !req.body.password) {
          return res.json({
            'success': false,
            'message': 'Username or password was not provided'
          });
        }
        cb(null);
      },

      function createUser(cb) {
        console.log('step 2');
        User.findOne({
          username: req.body.username
        }, function(err, user) {
          if (err) {
            console.log(err);
            throw err;
          }
          if (!user) {
            console.log('user doesn\'t exist');
            res.status(401).json({
              'success': false,
              'msg': 'Account does not exist'
            });
          }
          currentUser = user;
          cb(null);
        });
      },

      function createPayload(cb) {
        if (currentUser.password === req.body.password) {
          const payload = {
            id: currentUser._id,
            username: currentUser.username
          };
          const token = jwt.sign(payload, 'secretPhrase');
          res.send({
            'success': true,
            'token': token,
            'msg': 'Successful login'
          });
          console.log(token);
        } else {
          res.send({
            'success': false,
            'msg': 'Invalid credentials'
          });
        }
        cb(null);
      }

    ], function() {
      console.log('done');
      console.log(res.headers);
    });
  });

  authRoutes.get('/user', passport.authenticate('jwt', {session: false}), function(req, res) {
    console.log('getting /auth/user');
  });