code: function(decoded, request, callback) {
      // do your checks to see if the person is valid
      if (!people[decoded.id]) {
          return callback(null, false);
      }
      return callback(null, true, people[decoded.id]);
  }
docs: bring your own validation function