fixed cors
adding capitalization to CORS header