enable CORS on the LRS