Create the route authentication middleware and update the access token model and controllers to work with it (and look a bit more tidy)