add CORS support for Chromecast compatibility