Since strong-remoting should not be aware of loopback models (like access token), a better name for this property would be `authorization`.