middleware(['auth', 'verified']);