add flask_cors extension settings
delete @flask_cors decorator