bong authentication strategy for Passport.