custom hapi authentication scheme