update cors path.