enable cors in server sample

enabling cors under "/cors" path