fix consumer auth middleware