- fixed CORS missing definition