login route middleware is working