added cors-enable.py for local testing