always enable CORS when running locally
Merge pull request #84 from MayOneUS/local_corsn

always enable CORS when running locally