Seems like an oversight, doesn't it? I've created an issue to track here: https://github.com/keratin/authn-server/issues/15