Accept AccessToken as an option to the middleware and default to `getModelByType()`.

IMO Implementing `app.getModelByType()` should be trivial.