debug login and cors 15