trying to add CORS

not sure if we will get that working