first version of CORS on django