Add CORS to dev server