enabled CORS in WebApiConfig and marked Placement Providers controller as anonymous and Cors Enabled