I receive a cross origin error I want to allow * as cross origin