你如何向外行解释Passport的序列化和反序列化方法的工作流程?Where does user.id go after passport.serializeUser has been called?