moves cors and builder modules back up to ActionController:Base instead of ApplicationController