Add auth middleware
Merge remote-tracking branch 'origin/document-gathering' into document-gathering