fix(middleware): use includes()
for NextAuth pages
#5104
Merged
includes()
for NextAuth pages
#5104