debug login and cors 16