Moved cors plugin to correct location