Ensure request.auth is available to response middleware.