added cors redirect