add enable_cors.sh which by mistake was not included with last push