Decided that I may have been wrong. I suspect /debug does need to go through app.js but that I am handling it as a 404 instead of letting it fall through.