when logging in, we are saving to `app.locals`.
when logging in, we are saving to
app.locals.