Update strategy.js

Check request.body.session for authentication credentials.