force hapi 7.5.2
added cors support