assed CORS functionality to rack