Problem with scope fixed. Fixed also a typo.
Explicit make an Order with an user ID. And pass the req to the middleware.