remove requiresUser guard from auth plugin, create a new file for auth guards