update code with header.
udpated cors.