updated rails-cors config setting