add cors support

especially useful for tasseo