added cors support (hopefuly)