swagger and CORS support