Added CORS handling from all origins for /service