[BE] middleware auth

This issue has no description.

The issue title suggests implementing authentication middleware for the backend. Look for existing middleware files or authentication logic in the codebase. Determine the authentication strategy (e.g., JWT, sessions) and where middleware should be applied. Check for routes that need protection and define what 'done' looks like: a middleware function that validates requests and passes control or returns an error.

Written by the indexing model from the issue text.