fix path
add auth middleware to channel routes