installed rack cors to handle cors