enable cross origin sharing