shortcuts: expose CORS decorator