Added CORS headers to control cross-origin requests