allow cross-origin request
survey update method