add in the -cors option so the browser can talk to it