Ironing out auth middleware