Add auth middleware