change CORSAction to support Actions composition and rewrite controllers accordingly
manage fab attachment