added cors module to package.json