debug login and cors 1