fixed CORS freebase issue