put CORS in packages