try to fix the cookies
fix cors for muli hosts, for login