support force_cors in createVis