fix CORS in react