Fixed blacklisting of middleware within `auth()`, fixes #7