correct pkg name
handler: add CORS handler