а гостевые сессии.... для чего они вообще нужны
Do not declare methods using ES6 arrow functions (=>). Arrow functions explicitly prevent binding this, so your method will not have access to the document and the above examples will not work.
app.use(passport.initialize());
app.use(passport.session());
db.collection("customers").find({ id: { $in: [ 390, 754, 454 ] } }, { _id: 0, name: 1 })