stub auth middleware