enable CORS in viewBooks.py