CORS enabling

reference #1