More consistent with WAI
Vital bug - the updated vault was not passed over to the next middleware