to protect a page for logged-in users only
   require_once "../middleware/auth.php";
   requireLogin();


To protect a page for admin only:
require_once "../middleware/auth.php";
requireAdmin();


To protect a page for staff or admin:
require_once "../middleware/auth.php";
requireStaff();