Write a Next.js middleware that redirects unauthenticated users away from a protected route.