auth_owner and auth_user as dynamic middleware