PassportJS and fixed HTTP POST