allow cors
modify index view