cors set to true, new deploy