fixing cors config