docs: function authorize(route, req, res, next) {
    var allowed = true;
  
    if (type.is(route.allows, Array)) {
      allowed = route.allows.indexOf(req.session.authorized) > -1;
    } else if (type.is(route.allows, String)) {
      allowed = route.allows === req.session.authorized;
    }
  
    debug(req.method + " " + req.path + " [" + route.allows + "][" + req.session.authorized + "] : " + (allowed ? "OK" : "DENY"));
  
    if (allowed) {
      return next();
    }
  
    res.status(403).end();
  }