added cors to the site to assist with dev