added CORS fix for angularjs usage