Force audience to incoming host

When the `checkAudience` option is false, we need to force our audience
to the incoming host, otherwise passport will fail all requests with a
missmatched audience.