adding additional authorization middleware