load the cors support funtion in wrong place

which make it not work with grease monkey script