change cors to *
0.0.7