FIX: Typo in editor role can attribute
Move error middleware to last app.use call

Otherwise it wouldn't work in routers.
Separate error from other response data
Approve request middleware

A factory that takes action name and checks it against current user capabilities.
Persona authentication

Local authentication disabled.