fix CORS for socket