added instruction for removed authentication middleware to upgrading.md