when running in docker we might be using a different url thats not predefined in the cors so we want to allow 1 more