enable cors for companies controller