CORS handling by package cors. Missed package.json