Implements the passport-http-oauth API, but always returns true. Used in some debug modes to allow non-signed urls.