enable swagger / cors for js