I want to leverage next auth middleware to require being logged in to access certain route handlers of a certain path but I also want it to protect another path but only allow certain email addresses to be authorized