enabled Cross-Origin Resource Sharing (CORS)