renaming field to phone_number, and correcting cors middleware setting