remove test CORS links and change header info