cors support for events