middlewares/auth: bail out on an auth error