added cors config stuff