oauth: fix config. require passport strategies correctly