added cors installation in provision script