removed cors setting from config