No executing middleware

I tryed to execute like the documentation

$router->before('GET|POST', '/admin/.*', function() {
if (!isset($_SESSION['user'])) {
header('location: /auth/login');
exit();
}
});

but isnt working the request goes direct into private side of application without check if user has access and is loged

Start by reproducing the documented before('GET|POST', '/admin/.*', ...) middleware example and tracing request dispatch for an /admin/ URL. Confirm whether the middleware callback runs before the protected request; done means unauthenticated requests are redirected to /auth/login instead of reaching the private application.

Written by the indexing model from the issue text.