fix(middleware/cors): wrap logic in promise

fix(middleware/cors): wrap logic in promise #84