use correct namespace for corsmiddleware