feat: CORS IE8-9 support