removed the LTI auth middleware