experiment: figured out a way to add auth middleware to individual methods in controllers, bypassing route group middleware if needed
feat: authentication added to swagger