split swagger auth & app middleware, add support for swagger security spec and swagger-tools security middleware