I'm not sure what the point of delaying the `next()` call from the `res.send()` in the case that it was from a user token is.

I think this code is basically the exact same as

``` javascript
if (err) {
  res.send(err.statuscode, err.msg);
} else {
  res.send(result.statuscode, result.msg);
}
next();
if (tokenData.svr !== 'yes') {
  userService.deleteToken(sessionToken, function(){});
}
```
}