Finally have it working. Note - applying middlewares should be viewed with an "outside-in" approach - that's the progression / pass-on of the requests.