fix(cors): prevent restrictions on some devices