move `veriuser` middleware to sira-express-veriuser