this could be a `elif` instead, which would mean the middleware wouldn't check this string if the first condition already matched. This is called on every request after all..