add cors extension