single db connection passed through middleware as req.db