test config fix for CORS