add swagger-security middleware