unofficial OAuth strategy for runkeeper api