little bit of a nit - can't we just require user2.js with the User handler once? then it won't need to be passed into the middleware each time it's used.