added cors to config_application, and updated gemfile