handle CORS issues.
modify permission class of all viewsets to 'AllowAny' because authentication is very hard to handle in beginning of project.