admin - fix CORS issue for legacy compat mode