update cors version to 1.2