console里显示，先执行的GET请求，再是加载js，图片什么的，最后在再执行中间件。 是不是我的中间件顺序错了？请大家看下：

/**
 * Module dependencies.
 */

var express = require('express');
var routes = require('./routes');
var http = require('http');
var path = require('path');
//配置文件
var config = require('./config').config;
//获取地址
// host: http://127.0.0.1
var urlinfo = require('url').parse(config.host);
config.hostname = urlinfo.hostname || config.host;




var app = express();
app.configure(function(){
    // all environments
    app.set('port', process.env.PORT || config.port);
    app.set('views', __dirname + '/views');
    app.set('view engine', 'ejs');
    app.use(express.favicon());
    //console.log设置展示时间
    app.use(express.logger('dev'));
    //是Connect内建的middleware，设置此处可以将client提交过来的post请求放入request.body中。
    app.use(express.bodyParser());
    //methodOverride放在bodyParser下方用于包含表单值的req.body
    app.use(express.methodOverride());
    //添加cooket和session
    app.use(express.cookieParser());
    app.use(express.session({
        secret: config.session_secret
    }));
    //添加路由机制
    app.use(app.router);
    //设置静态文件位置
    app.use(express.static(path.join(__dirname, 'public')));

});

/*
// 错误处理机制在开发模式下将错误输出出来
if ('development' == app.get('env')) {
    app.use(express.errorHandler());
}*/

//设置生产环节和开发环境
var maxAge = 3600000 * 24 * 30;
var staticDir = path.join(__dirname, 'public');
app.configure('development', function () {
    app.use(express.static(staticDir));
    app.use(express.errorHandler({ dumpExceptions: true, showStack: true }));
});

app.configure('production', function () {
    app.use(express.static(staticDir, { maxAge: maxAge }));
    app.use(express.errorHandler());
    app.set('view cache', true);
});


// set static, dynamic helpers 设置config
app.use(function (req, res, next) {
    console.log('config');
    res.locals.config = config;
    return next();
});

app.use(require('./controllers/sign').auth_user);


//设置防范csrf攻击
// custom middleware
var csrf = express.csrf();
app.use(function (req, res, next) {
    console.log('csrf');
    csrf(req, res, next);
});

//检测完csrf后设置_csrf为空。
app.use(function(req, res, next){
    res.locals.csrf = req.session ? req.session._csrf : '';
    //res.locals.req = req;
    //res.locals.session = req.session;
    console.log('csrf is ' + res.locals.csrf);
    next();
});

routes(app);

http.createServer(app).listen(app.get('port'), function(){
  console.log('Express server listening on port ' + app.get('port'));
});