Include third-party auth data (token, tokenSecret) in returned profile, save in session