aded some cors lines in ap controller