tiny fix
modified ControllerMiddleware
change protected response to public
Add Auth Middleware