added django-cors-headers to requirements