enable cors and turn off caching