A super simple permission module for access control with tokens