if r.Method == http.MethodGet || r.Method == http.MethodHead {
        // GET on /stashes
        u.Mu.RLock()
        stashes := Filters.Stashes(&u.Data.Stashes, token)
        u.Mu.RUnlock()