added pry for debugging
get CORS working for session creation