attempt to fix heroku cors issue