enable cors for elasticsearch - fixes #6