Validate X-Parse-Session-Token in NodeJS before calling background jobs

sample.js

var deferred = q.defer();

request.get({
    url: 'https://api.parse.com/1/users/me', // validate session token
    headers: {
      'X-Parse-Session-Token': req.header('X-Parse-Session-Token'),
      'X-Parse-Application-Id': 'secret',
      'X-Parse-REST-API-Key': 'secret'
    }
  },
  function(err, resp, body){
    // etc.
  });

return deferred.promise
    .then(function(response){ 
      // WARNING: At this point, we know its a valid user but that's ALL we know,
      //          we do NOT know if it has sufficient permissions to run the job.
      // TODO: call background job with master key
    },
    function(error){
      // etc.
    });