This should be hanging out in `routes/`, not `lib/middleware`