fix typo, and patch method to allow Rack:Cors