gistfile1.js

        handle: function(request, response) {

            var self = this,
                context = new requestcontext.RequestContext({request:request}),
                isNewPlayerCommand,
                implResponse;

            isNewPlayerCommand = self.impl.isNewPlayerCommand(context);

            if (!isNewPlayerCommand) {
                if (!self.authenticator.isValid(context)) {
                    log.message('... Ignored, authenticator disabled', 'error');
                    // TODO disabled for now
                    //    self.accessDenied(context, response);
                    //    return;
                }
            }

            // if we're good, commit change to world
            implResponse = self.impl.handle(context);

            if (isNewPlayerCommand) {
                var credentials = self.authenticator.createUser(context);
                implResponse = core.extend(implResponse, credentials);
            }

            self.ok(implResponse);
        },