Thread-safety: Don't share request object between reqeusts

Multithreaded rack servers like [Puma](https://github.com/puma/puma) keep one instance of the middleware but call out to it from multiple threads.