Fixed blacklisting of middleware within `auth()`, fixes #7

Missed one