nodejs spike using Google OpenID for Authentication and a different service for Authorization