changing cors resources to all