Add CORs support on users controller