added script to enable CORS for local testing.