use CORS url for socket.io