debug login and cors 10