added some cors code. not that it helped at all

gosh