Enabling CORS for the API