See the TODO's in cloud/lambda/auth.py and cloud/lambda/users.py where we're sometimes making a request to our table and ignoring what happens.
In simpler terms: figure out if we need to confirm actions like table.put_item or table.delete_item in boto3.