add a middleware on users/ route