enable CORS. fixes for uploading data