added cors to quote route