fix(middleware/cors): wrap logic in promise (#710)

fix(middleware/cors): wrap logic in promise (#710) #90