Add RBAC middleware