fixed bug in middleware->reject flow; added multiple possible values to req.assert type