Api should use rack-cors