adding authentication middleware for HTTP_REMOTE_USER