change cors
enable cors
load authenticated service