path: root/src/server/TODO.txt

-- API calls using Basic auth with an invalid or expired token should reflect so in the response, currently the response is always 'Your token does not grant you access to this resource'