fixed duplicated cors headers