modifying cors config