fixing issue #97

Now able to merge as well.
As a followup, the reasoning is that once this file has been required by the main app logic, `allowQueryString`'s value will never change. This means that testing this functionality will require setting the environment variable and then re-requiring the app for each case.

This change would dynamically check the value of the ENV var each time the middleware runs.