add cross origin headers, v1.0.1