pulled oauth2orize because I did not want to have to have a allow or deny screen pop up after the user had already logged in. After all if the user is being redirected here to login in so the client app can get an auth token to have access to the users information, you dont need to ask the user twice to give the client app access, the user authenticating is essentially doing than, and the way jaredhanson wired oauth2orize, its just to much work to try to code around it. I have just about come to the realization i dont even want to use even passport anymore.