request object to can be created for each strategy and can be augmented with the Authorization code
we're no longer using the cookies object, instead relying on the response object