added CORS middleware function
post route now adds font to db