add django cors headers
remove organization from form