adding cors to tendencies endpoint