Re-ordered routes and middleware files for app.js

Authentication & Authorization now goes to middleware/auth.js