anchor.diff:  first section of this document.
   
   Instead of trust a session key,it extracts a token from `Authorization` header like oauth, and
  -unsigns it (extracted token) using the signing framework. 
  +unsigns it (extracted token) using the signing framework.
   
   If a signature is valid, the contents of unsigned data trustly set to `:identity` key on request.
   
  
positive.code: ----
  
  Signing process consists on concat signature on the end of the original string,
  separating the signature with predefined separator (default ":" char). Signature 
  consists on timestamped hmac signature. *Timestamp* can be used for invalidate by 
  time some signed data.
  
  .Invalidate signed data using timestamp
  
negative.code: ----
  [buddy "0.1.0-beta1"]
  ----
  
  
  Maven
  ~~~~~
  