var port = process.env.PORT || '3000';
var express = require('express');
var app = express();
var path = require('path');
var favicon = require('serve-favicon');
var logger = require('morgan');
var cookieParser = require('cookie-parser');
var bodyParser = require('body-parser');
var io = require('socket.io')(http)
var session = require('express-session')
var passport = require('passport')
var flash = require('connect-flash')

var http = require('http').Server(app)

var index = require('./routes/index');
const signup = require('./routes/signup');
const login = require('./routes/login');
const secret = require('./routes/secret');
var setupPassport = require('./passportSetup')


// view engine setup
app.set('views', path.join(__dirname, 'views'));
app.set('view engine', 'hbs');

// uncomment after placing your favicon in /public
//app.use(favicon(path.join(__dirname, 'public', 'favicon.ico')));
app.use(logger('dev'));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: false }));
app.use(cookieParser());
app.use(express.static(path.join(__dirname, 'public')));
app.use(session({secret: 'use a config var in production'})) //SEE THIS
app.use(passport.initialize())
app.use(passport.session())
setupPassport()

app.use('/', index);

// catch 404 and forward to error handler
app.use(function(req, res, next) {
  var err = new Error('Not Found');
  err.status = 404;
  next(err);
});

app.use(function(err, req, res, next) {
  // set locals, only providing error in development
  res.locals.message = err.message;
  res.locals.error = req.app.get('env') === 'development' ? err : {};

  // render the error page
  res.status(err.status || 500);
  res.render('error');
});

io.on('connection', function(socket) {
  console.log('connection made');
})

http.listen(port, function() {
  console.log('listening on localhost:3000');
})

// error handler

module.exports = app;

@@ -421,16 +421,46 @@
 -flash')
+%0Aconst cors = require('cors');
 %0A%0Avar ht
@@ -1111,24 +1111,40 @@
 public')));%0A
+app.use(cors())%0A
 app.use(sess

add cors