disables authentication for the time being
adds nelmio/cors-bundle
enables cors in backend