Allow components to add passport strategies
After passport has been initialised and the core passport strategies have been added, there needs to be a call to components that want to add further passport strategies (e.g. an ORCID component that adds an ORCID OAuth2 strategy).
In the ORCID case, the called function needs access to passport and the User model, but it may make sense to pass in the whole app object.