fixed cors version regex flow