Hackery with passport.js