I see. So it's probably not hitting the middleware.. something else must be returning 200 then