You can enable `auth` middleware either globally or per route.