Doh. Forgot the authentication middleware