Support legacy Express middleware where status code is first arg.

See this comment for context:

https://github.com/jaredhanson/passport/issues/229#issuecomment-40002895