Add mention of response.locals.token.