corrected variable name typo in cors module