Group linked with OAuth user & move passport.js out of config