So I was expecting a tutorial at the end of this critique. Why not offer a tutorial on how best to protect Nodejs application with passportjs. All talk no example.