updated cors and csrf filtering
updated cors and csrf filtering
updated session domain
updated session domain