I used PassportJS on a project last year, and a) it was a total nightmare to get it working, with very poor documentation and b) it does almost nothing. It's basically the "now draw an owl" meme of auth.