TOTP authentication strategy for Passport with req in callback (fork from Jared Hanson original work).