enable swagger / cors for js

enable swagger / cors for js