// middleware for authentication
export default function authorize(req, res, next) {
  let apiToken = req.headers['x-api-token'];
  
  req.db
     .users
     .findByApiKey(apiToken)
     .then(user => req.user = user) // set user on-success
     .finally(next); // always continue to next middleware
}