PassportJS user poaching helper