Playing with using middleware for auth