switch to proper middleware for authentication
apply authentication middleware to data routes