adds cors everywhere possible
changes cors in routes