remove middleware to use the auth controller
refactor the middleware and move auth method to controller
auth_token store in the cookie