unauthorize error handler
loading leases fix
cors fix