Fix subtitle submission authentication - properly pass user info through auth middleware

Fix auth middleware to include user role from headers

Fix auth middleware to work with simplified token system

Add auth middleware and make subtitle routes public