Getting the auth middleware ironed out