moved report route to separate middleware