allow middleware apps