test(auth): add unit tests for authMiddleware covering dev/prod modes and public routes