Change middleware order

So error catch all panics, third-party can use status and elapsed time.