cors support, fixes #3