Revert "enabled CORS"

This reverts commit 0676b4df4771b093a37c7164c2699daaca81c66e.