Fix #12 — Put MSISDN validation in a middleware.
Refs #13 — Derive the HAWK tokenId and HAWK authKey from the msisdnSessionToken.