Passport.js strategy for forwarded client certificate authentication