Security issues

MongoDB inputs are not fully sanitized and should be checked via mongo-sanitize or express-mongo-sanitize package. Fix passport serialization