Add `/pair` route and handle `authMiddleware`