nl_tokens: calls a method called allow in our options that will perform any access checking
pl_tokens: function allow ( <mask> , req , res , cb ) { // call the allow method in our options if it exists // or we will just assume it is always allowed if ( options . allow ) { return options . allow . apply ( this , arguments ) ; } return cb && cb ( null , true ) ; }