add cors access-control-allow-origin to php-agi