adding config dir
enable CORS