debug login and cors 14