Adding custom middleware to protect user admin area