add cors to raml resource request