update config, and cors