Readded CORS support in app.js