passportConfig? Really? Could be right, but seems odd to me. I would expect just the passport.authenticate . . .