match cors config in test