fixed CORS issue with origins and the email endpoint