debug login and cors 3