moved rack cors to config.ru
rack cors