stubbed auth middleware example