added authorization middleware. not currently being used during development