add cors consumer support