quick and dirty fix to allow CORS

Signed-off-by: remi-parain <rparain@ubidreams.com>