This exists as a reference for api best practices using express and SAML token authentication