Why middleware may not be the right abstraction for your data policies
blog.chiselstrike.com