add cors and baseurl