@Path("/token")
    @POST
    @Produces(MediaType.APPLICATION_JSON)
    public final UserToken getToken(@Context final HttpServletRequest httpRequest,
                                    @FormParam("e") final String emailAddress,
                                    @FormParam("p") final String clearTextPassword,
                                    @FormParam("r") @DefaultValue("") final String referrer) {

        final IObjectSource<User> source = userSourceProvider.get();

        Predicate p = new BeanPropertyValueEqualsPredicate("emailaddress", emailAddress);
        final List<User> users = source.getObjects(p);

        if(users.size() == 1) {
            final User user = users.get(0);

            String storedEncryptedPassword = user.getPassword_();

            if(passwordEncoder.isPasswordValid(storedEncryptedPassword, clearTextPassword, null)) {
                return new UserToken(user.getUserid());
            }
        }

        return new UserToken();
    }