requirements.txt with cors