add CORS restful service call