export default function authorize(req, res, next) {
  let apiToken = req.header['x-api-token'];
  
  req.db
      .users
      .findByApiKey(apiToken)
      .then(user => req.user = user) // set user on-success
      .finally(() => next()); // always continue to next middleware
}