allow CORS for get giraffe dashboard file