I’m not comfortable with this being state on the `Bouncer::App` instance. It varies per request, so it should be local to `#call`; if we need it in the methods we subsequently call, we should pass it in as an argument.