Authentication middleware

(this one can be a simple middleware using only a hard-coded access token)