add missing link to Rack::Cors