added CORS support to allow neurosynth requests