updated package.json for cors