register cors on config.rb