Auth middleware(untest).