util method to enable CORS