Update authentication middleware to use full REQUEST_URI