Add user auth middleware