adding cors filter and some admin changes