updating cors headers
trying to fix cors