+ example: api request
authorize checks the token against the stored data
async authorization split middleware logic - process() hosts the branch out logic (based on auth method)