added cors headers to slim