fix claims authentication middleware to use new claims