debug login and cors 2