fixed: missing next() in middleware