added CORS for option