Middleware shouldn't call `res.json()`, it should just call `next()` or `next("some error")`