Make sure we use the options provided during strategy construction when instantiating the oauth object, rather than the option provided to the authenticate method.