Pause the req before checking access

See https://github.com/strongloop/loopback-storage-service/issues/7