support CORS
supplement the api document