cors working add cors gem- thanks joel