Add auth middleware (access token checking), add user finding routes, update PAW, add new tests