routes options again
more cors troubleshooting