This is a really simple piece of Owin middleware to process all requests and check for a valid token against a user defined list of tokens.