commited after trying rails-cors