PFAS Auth authentication strategy for OmniAuth