Insert middleware after ActionDispatch::ParamsParser

Other apps that use middleware (e.g. Devise/Warden) use their own
middleware, and can render pages before lower middlewares can intercept
the response.