add cors support [#5]