Passport bearer strategy implementation, basic user path authorization