safety around missing returns from middleware