debug login and cors 11