HTTP Bearer authentication strategy for Passport and Node.js.