don't call Middlware#allowed_messages 3 times - call it in Middlware#call and save it as instance var
remove debug puts