anchor.diff:  
   This will ensure that:
   
  -<1> Any message without a destination (i.e. anything other that Message type of MESSAGE or SUBSCRIBE) will require the user to be authenticated
  +<1> Any message without a destination (i.e. anything other than Message type of MESSAGE or SUBSCRIBE) will require the user to be authenticated
   <2> Anyone can subscribe to /user/queue/errors
   <3> Any message that has a destination starting with "/app/" will be require the user to have the role ROLE_USER
   <4> Any message that starts with "/user/" or "/topic/friends/" that is of type SUBSCRIBE will require ROLE_USER
  
positive.code:         </b:bean>
      </b:constructor-arg>
  </b:bean>
  ----
negative.code: }
  ----
  
  The JavaScript can make a REST call to the endpoint and use the response to populate the headerName and the token.
  
  We can now include the token in our Stomp client.
  For example:
  