working on cors and login