Passport v0.5.1

This release continues the work started by v0.5.0, and simplifies the application-level middleware needed to configure Passport. In particular, passport.initialize() is no longer required. The only middleware that would typically be used at the application-level is now passport.session(), which is optional and only needed if your app needs session-based authentication. Apps that only provide API endpoints and don’t need sessions now require no Passport middleware at the application-level.

For backwards compatibility, passport.initialize() still exists, but its functionality has been reduced. passport.authenticate() now contains all the logic to initialize Passport, removing the ordering requirements between the two middleware functions.