added cors header for message send api