rack:cors working but bookmarks controller gives a get 200 instead of 201