OAuth2 Strategy requires a clientID option