change the privacy middleware so it is commented out by default