added rack-cors config