An additional API call during the authentication callback is currently used to determine if the user belongs to the librarian team. See PR #3.
This can be made asynchronous as it's relatively slow. The flag can be updated a couple of seconds after the user has been logged in.