Your configuration is more or less correct and it's working - I tested it and used your file as is.
More or less, because you do not need to mess around with the header and the middelware, you can safely comment that out.
I'm not sure if that's the reason. There is probably something else that you configured or are using incorrectly.