add allow method cors
use rel paths in *.redhat.com