You return result before User.findOne has any opportunity to give you something. Instead you should add a callback function to authentication method e.g.
exports.auth = function(user, pass, callback){
User.findOne(...., function(err, user){
var result = !!user;
callback(err, result);
});
}
Anyway, you should get used to asynchronous code to feel comfortable working with node. These tutorials are likely to help you: How do I get started with Node.js