I haven\'t been able to track this down, but for my set up, isAuthenticated always returns false even after a successful login. Here\'s the passport code:
isAuthenticated
I guess you forgot to put: req.login(...) inside passport.authenticate('local', function(...){}).
req.login(...)
passport.authenticate('local', function(...){})
See here (at the end of the page)