added CORS support to the api