Added CORS header to /areas