adding cors to support Node REST server