Async authorization

Have you considered making the authorization methods async?
Something like:

``` coffee
UserModel.statics.authorize = (req, cb) ->
  doStuff(req, ->
    permission = 
      read: true
      write: true
    cb(null, permission)
  )
  return
```
