kibana3 + elasticsearch1.4 ~> http.cors.enabled