fixed cross origin headers issue