Is it safe to check the user session only in middleware and not in routes in Hono? - Better Auth