Use Authorization header and check before logging out.
Parse login token before routing.
Use login token from Authorization header to determine street creator.
Handling pre-flight OPTIONS requests properly.