honor upstream middlewares that may have already set this.locals