Node.js passport strategy based on http request header