[add] CORS done for http service