entirely outside the express app so I can't ride on express middlewares and in turn can't make use of supertokens' provided middlewares