master Poppulate user token
master If auth required and no user information is stored in session fire access denied
master Throw not found exception if auth key provided to the route but no user session is presented
master Set auth key on different routes