Added an SSA verification plugin to restify that transforms the _user token, when present, to an email address, setting the _email param of the request object on success. If that step fails, it automatically returns a 403 bad_user response. This will help eliminate some boilerplate we've been using in pretty much every API endpoint.
Replaced all instances of `auth.verifySSA(_user)` with the new `_email` param outputted by the SSA verification plugin
Added documentation for SSA verification plugin, and fixed a potential security flaw by always setting the _email parameter
Style fixes
Style
Moved _email to a root-level property on request, so that there's no risk of having it set by callers of the API
Fixed a typo
Added an SSA verification plugin to restify that transforms the _user token, when present, to an email address, setting the _email param of the request object on success. If that step fails, it automatically returns a 403 bad_user response. This will help eliminate some boilerplate we've been using in pretty much every API endpoint.
Replaced all instances of `auth.verifySSA(_user)` with the new `_email` param outputted by the SSA verification plugin
Added documentation for SSA verification plugin, and fixed a potential security flaw by always setting the _email parameter
Style fixes
Style
Moved _email to a root-level property on request, so that there's no risk of having it set by callers of the API
Fixed a typo
Merged remote copy of auth-plugin to appease git so I can push the rebase with master
Merge pull request #94 from cvan/auth-plugin

Added user SSA token verification plugin