Add method to retrieve an user given the AuthToken.
Auth with token.
Wire up the user database.
Better to have a constant,
Fix the imports (squash me).
Auth with the security session.
Get user by token (to remove).
Just intentions.
Plain if logic.
Better error message.