Rack based authorization middleware.