In Laravel Which middleware fires first CSRF or AUTH

According to the Laravel Website

Laravel will first authenticate the USER that is fire the

Auth middleware and then fire CSRF middleware.

But What if the Login page is a a fishing page and isn't it the more natural to first check if the request is from our own website and then Check if the user authentication ??.

Can some one throw some light on the same .

Thanks

Any help would be appreciated

via Chebli Mohamed