vendor profile edit and CORS fixes