read cors address from config