docs: function(req,res,next){
    var token = req.get('X-OOSE-Token')
    if(!token || user.session.token !== token){
      res.status(401)
      res.json({error: 'Invalid session'})
    } else {
      req.session = user.session
      next()
    }
  }