added cors headers to config file