fix retsly-js-sdk CORS