added actions package for CORS handling