one point is I still want to reused the user-permssion-plugin. for some requests, no my header exist, UPP should perform the auth.
If I added my middleware before the UPP, I need to attached a user to ctx to simulate request has been authed, is that right?