martini middleware for auth