Edit, no you aren’t. You are using a later version than the first challenge in this series said that you need. Using different versions of packages than is specified will mean that the content in the challenges is not always going to work for you.
As said, whenever you update a package version you have to expect potential breaking changes. Although, as this package (passport) has never released a major version the breaking change is behind a minor version update which isn’t ideal (going by SemVer anyway).
Given a version number MAJOR.MINOR.PATCH, increment the:
MAJOR version when you make incompatible API changes,
MINOR version when you add functionality in a backwards compatible manner, and
PATCH version when you make backwards compatible bug fixes.