set CORS policy for bootstrap files
set CORS policy for bootstrap files