Guard the route!

A request wants in. Line up the right middleware — auth, verified, throttle, can — in the right order so only the right visitors reach the controller.