fixed cors 2