This is necessary because the default permissions class for this repo
uses a hard-coded key "user" to check the user against the JWT token.