added CORS example