added cors header

Signed-off-by: nickolayrusev <nickolay.rusev@gmail.com>