update url
Switch to rack-cors gem