we could ditch the etag since we have an etag middleware, express has to special-case it since middleware don't really get a chance to act on responses