debug login and cors 9