test controller added and cors enabled