fixing CORS references