add cors post from railstutor.github.io