const CORS_ALLOWED_ORIGINS: &str = "CORS_ALLOWED_ORIGINS";