Decorating `req.allows` to avoid redundant ops & adding with fallback to redundant ops incase a middleware does something weird