cors configs
added options route to the users route for testing