2018-09-13 UTC
# aaronpk mayo: for a single user system there's no need for user IDs in the Microsub URL. But for Aperture, a request comes in with a token to the Microsub endpoint, and Aperture doesn't know how to validate the token since it was created by someone's own token endpoint. So it looks up the token endpoint in the DB given the user ID in the Microsub url and validates the token there