add CORS support for tachyfont access from a different site's pages