separated header css and auth middleware