Misfit authentication strategy for Passport and Node.js