More compact, auth middleware moved from /middleware/auth to /modules/web/auth