Enable cors

Enable cors for xslt files