cors origin missing header in android - bug fix