created a proper cors policy that by adding a route that used update frontend urls for their projects only our backend allow that user added frontend request otherwise it not proceed the requests. for achive this added a new function to check it is valid projects in the middle while creating user or loggin user. the website refer url is checked so it can be safe and secure