cors related updates