HTTP Token authentication strategy for PassportJS