debug login and cors 4