remove cors reference