update configuration, update controller logic to correctly CORS post