bump to 1.3.2
update to 1.4.0 and leave the ability to enable cors commented out