ensureauthorized middleware worked