added CORS support to the webservice