Reimplement some node-oauth2-server methods to remove hacky code needed by our external login workflow