add basic CORS setup
add basic authorization with CORS