Fix middleware/authorization path