added CORS support for persona