fixing deploy issue with access-control-allow-origin