disabling the built in auth middleware, needs to be implemented better