commented out authentication/authorization middleware