added corsheaders to installed apps