enable cors for Chad