added new auth backend and middleware