added cors for local testing vis