added authentication  middleware to express route