add cross-origin support for apps