forgot to pass profile URL into passport options; cleaned up function returns