I am curious as to whether it is possible for a user to alter the req.user object from the client-side with the npm package passport? Let me know if you have any insight. Is