Auth best practice: middleware or root beforeload? - TanStack