add CORS support and test