csp & cors
update plan; csp & cors explanantion done