Add CORS support to api