adding CORS to the submit server