ok, middleware per-route is working