test '_userId' before model.session.userId
some store.js cleanup
||, not &&
accept(false) for !sess && !sess.userId (we were accpeting true before
due to bug at https://github.com/codeparty/racer/issues/37, but maybe
we should be returning err() instead?)
return err(msg) for invalidated this.session on store accessControl
callbacks. This shouldn't be happening, and is a serious issue
expose errback info to root app
bump
for now accept invalidated sessions,
add check on isServer for busted session, accept(false)
Merge branch 'master' of git://github.com/lefnire/derby-auth