add cors for each routes