access control allow origin
add help message