switched to passport
very basic working oauth
Finally sort of working.