This is necessary because the default permissions class for this repo uses a hard-coded key "user" to check the user against the JWT token.
