Logged-in Middleware (Disallow anonymous access to certain endpoints)

Is this a bug? Make sure to use the Bug template above and be as detailed in your report as possible.