add middleware to allow other website to connect