for making context to pass to acl checker
function authCtx(req, res) {
  let ctx = {
    accessToken: null,
    remotingContext: { req: req, res: res }
  }
  // populate accessToken
  if (req && req.accessToken) ctx.accessToken = req.accessToken;

  return ctx;
}