tolerate multiple register players for the same user
add cors