                     fn()
                     
             
-            ## a static token has to be of the length of 40 plus the key in @_TOKENS
-            ## e.g. 8b804dd8-7a88-4142-8b33-913a586d67b4----backend so that the following comes true
-            ## @_TOKENS['backend'] is '8b804dd8-7a88-4142-8b33-913a586d67b4----backend'
-            else if @_TOKENS[sid] is token
-                fn()
-            
-            else
-                #console.log 'session failure', sid, sess, sess?.user
-                
-                fn new Error 'unauthorized sessionID'
+            else 
+                super token, fn
                 
         ##
         ##

    ##
    ## 
    ##
    class HttpSessions extends floyd.Context
        
        configure: (config)->
        
            @_hiddenKeys.push 'Registry', 'Session'
            @_TOKENS = config.tokens
  
            super new floyd.Config
            
                data:

        ##
        ## 
        ##
        authorize: (token, fn)->            				
            
            if token && (sess = @_registry?.get (sid = token.substr 40))
                
                #console.log 'found session', sess, sess.public.user?.login

