add cam to the app + hack cors again