def appauth(_userid, _request):
    """
    Every user is an app user.
    Normally this function would map usernames to their corresponding
    group memberships. In our case, every user who passes who authentication
    is automatically a group:apps user.

    If we add cookie authentication in the future it will not use
    this callback function.
    """
    return ['group:apps']