route: allow route-global middleware