cors for tagged courses json access