updates cors support on heroku