updated cors. plz work