adding CORS support to the demo.