add cors to contingent get