add passport-oauth and config.js file

All secretive data should be stored in the config.js file.