added the CORS_HEADERS to settings