full CORS fix

added CORS fix in all methods