nl_tokens: post - authentication - customAuthHeader
pl_tokens: function figureOutWhoUserIs ( req ) { // just stubbing this out here var username = req . query . username if ( username === 'skroob' ) { return { username : username , email : 'pres@skroob.com' } } throw <mask> HttpErrors . Unauthorized ( ) }