Oauth 2-legged strategy for passport