Added CORS headers to API views