adding cors support for reports endpoint