'use strict';

/**
 * Module dependencies.
 */
var passport = require('passport'),
	User = require('mongoose').model('User'),
	path = require('path'),
	config = require(path.resolve('./config/config'));

module.exports = function(app, db) {
	// Serialize sessions
	passport.serializeUser(function(user, done) {
		done(null, user.id);
	});

	// Deserialize sessions
	passport.deserializeUser(function(id, done) {
		User.findOne({
			_id: id
		}, '-salt -password').populate('children').exec(function(err, user) {
			done(err, user);
		});
	});

	// Initialize strategies
	config.utils.getGlobbedPaths(path.join(__dirname, './strategies/**/*.js')).forEach(function(strategy) {
		require(path.resolve(strategy))(config);
	});

	// Add passport's middleware
	app.use(passport.initialize());
	app.use(passport.session());
};

@@ -476,16 +476,59 @@
 hildren'
+, '-password -salt -provider -roles -email'
 ).exec(f

remove child password, salt, etc fields from populated subdocument