enable cors in server sample