cors problem on prod