updated cors to 2.4.1 from 2.2.0