trying rudy lee's solution
rack cors installed