async function disableAuthStrategy(req, done) {
  try {
    const { config } = req;
    const noAuthUser = getNoAuthUser(config);
    return done(null, noAuthUser);
  } catch (error) {
    done(error);
  }
}
A noauth / disableAuth custom strategy
When enabled, it always authenticates the request to whatever noauth user is configured
Using passport here probably isn't necessary, but it keeps the user/session objects consistent
@param {Req} req
@param {function} done