Need to first check if the strategy used supports payload authentication. We also need to validate the route config if it is requiring payload authentication and allowing a strategy that doesn't support it.