re-enable cors-check