I have express node.js server code using Passport. It receives a user to authenticate it and send him to some data registration form.Some concerns:My whole routes definition depends upon a MongoDB connection using mongo-db ,but model used by Passport is done through another connection bymongoose.The main problem is that even though Passport it's doing it's work, I still can go to localhost/registro directly no matter I didn't logged in first.Code already looks a little messy and disorganized.I care about security. I'd also like to have some information about the user during the session time, but am unsure how to best achieve that.This is my server.js:var express =       require('express')var mongodb =       require('mongodb')var mongoose =      require('mongoose')var bodyParser =    require('body-parser')var passport =      require('passport')var LocalStrategy = require('passport-local').Strategy;var app = express()var BSON = mongodb.BSONPureapp.use(passport.initialize());app.use(passport.session());app.use(express.static(__dirname+/public))app.use(bodyParser())var MongoDBClient = mongodb.MongoClientmongoose.connect('mongodb://localhost/psicologosTuxtepecDB')var Schema = mongoose.Schemavar userCredential = new Schema({    username:   String,    password:   String},  {    collection:     'members'})var userCredentials = mongoose.model('members', userCredential)passport.serializeUser(function(user, done) {  done(null, user);})passport.deserializeUser(function(user, done) {  done(null, user);})passport.use(new LocalStrategy(function(username, password, done) {  process.nextTick(function() {    userCredentials.findOne({      'username': username,     }, function(err, user) {      if (err) {        return done(err);      }      if (!user) {        return done(null, false);      }      if (user.password != password) {        return done(null, false);      }      return done(null, user);    });  });}));MongoDBClient.connect(mongodb://localhost/psicologosTuxtepecDB, function (error, psicologosTuxtepecDB) {    if (error) {        console.log(We've got a connection error, so far we should take this function better for a correct debug)    }    else {        console.log(Connection to psicologosTuxtepecDB has been successful)        // Seleccionamos una coleccin        var psicologosCollection = psicologosTuxtepecDB.collection(psicologos)        app.get('/registro', function(request,response) {            response.sendfile(public/html/registro.html)        })        // Cuando nos hagan una peticin HTTP de tipo POST en la ruta psicologos...        app.post(/psychos, function(request, response) {            var psychologist = {                personalData:           request.body._personalData,                professionalData:       request.body._professionalData,                professionalInterests:  request.body._professionalInterests            }            psicologosCollection.insert(psychologist, function(error, responseFromDB) {                if (error) {response.send(responseFromDB)}                console.log(Se ha insertado: + JSON.strinfigy(responseFromDB))                response.send(responseFromDB)            })        })        app.get(/psychos/:id, function(request, response) {            var id = new BSON.ObjectID(peticion.params.id)            psicologosCollection.findOne(                                             {'_id':id},                                            function(error,responseFromDB) { if (error) {response.send(responseFromDB)} response.send(responseFromDB)}                                        )        })        app.get(/psychos, function(request,response) {            psicologosCollection.find().toArray(function(error,responseFromDB) {                if (error) {response.send(responseFromDB)}                response.send(responseFromDB)            })        })        app.post('/login',          passport.authenticate('local', {            successRedirect: '/loginSuccess',            failureRedirect: '/loginFailure'          })        )        app.get('/loginFailure', function(req, res, next) {            res.redirect('/')        })        app.get('registro', function(request, response) {            response.sendfile('public/html/registro.html')        })        app.get('/loginSuccess', function(req, res, next) {          res.redirect('/registro')    })          app.listen(80, function () {        console.log(app escuchando en el puerto Maricela fecha de nacimiento DDMM)    })}})
Modularize this node.js express server code for routes and session handlers?
javascript;node.js;mongodb;express.js;passport