remove cors for each route