fix cors problem with site files