make this strategy accept the "passReqToCallback" option

I have the same requirements for 'post login processing' when someone logs in with a "remember-me" cookie (as compared to other auth strategies in use)

in order to be able to call my handler(s) for 'post login processing' I need to pass in the `req` object - in my case session data needs to be set, specifically I track the kind of login used so that I can request/require that a user verifies 'account-id + passwd' before updating sensitive data if the user initially logged in with a "remember-me" cookie (or some other one-time-pass)