middleware defined before router - woops