CORS with mongo insertion