fix cors issue for cloudfront