Now there's a status page, we can consider it public
Now does user management itself
The middleware is smart enough to only apply it when needed, and only when it's not already compressed, so it's fine.