missing http auth middleware