Migrate from passport to next-auth

This also allows us to get rid of next-connect and be closer to the raw Next.js APIs to prepare us to adopt server components.

Additionally, it saves space in the database, allowing us to get rid of the ever-growing sessions table (and gc-sessions endpoint).