support CORS for studio services