write blog post on passport-local-mongoose (if not the entire package, at least on using .changePassword)