Low level Rack authentication enforcement