fix: configuration file

fix: set CORS to false because it's posible the user

had implemented a global middleware, so headers are
innecesary in most cases. Only activate CORS If you needed