debug login and cors 13