We move all the auth handling, serialization and deserialization into a new AuthContext interface, and then standardize a registration model for handling of specific auth context types (user, robot, token, etc).
This should help for bursty pull traffic, as it will avoid DB connections on a huge % of requests