Put Ghost behind a login

Thanks for the info. Going to look into nginx subrequest authentication, but wondering if its possible to use passport w/o having to hack the core. I noticed that the ghostServer takes in an express instance, as seen in the main Ghost repo (https://github.com/TryGhost/Ghost/blob/master/index.js).

I am currently using the Ghost-on-Heroku repo (GitHub - cobyism/ghost-on-heroku: One-button Heroku deploy for the Ghost blogging platform.), which has its own server.js to launch Ghost on Heroku. I am wondering if its possible to utilize this to introduce passport to support authentication.