added cors headers to the server