allow origin for metrics tracking