docs: function _decode (cookieName, cookieDomain, publicUrl) {
    return (req, res, next) => {
      // JWT in a cookie = already active session
      const cookies = new Cookies(req, res)
      const token = _getCookieToken(cookies, req, cookieName, cookieDomain, publicUrl)
      if (token) {
        req.user = jwt.decode(token)
        _setOrganization(cookies, cookieName, req, req.user)
      }
      next()
    }
  }