add DisableCORS for swagger service