The authorization would better be a middleware wrapped

### example
`App::new()
            .register_data(Data::new(state))
            .wrap(Logger::default())
            .wrap(cors)
            .wrap(crate::middleware::authen_middleware::Authentication)
            .configure(routes)
        })
        .bind(&bind_address)
        .unwrap_or_else(|_| panic!("Could not bind server to address {}", &bind_address))
        .start();`