Moved authorisation middleware before message store middleware

Closes #100 
Yeah, good idea. That's much more correct. I'l make the change.